Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/EuMO3H8UNHNODp6etqEdVnjiA_s.roa
File: EuMO3H8UNHNODp6etqEdVnjiA_s.roa (raw, json)
Hash identifier: /tUEEb9XxBzVzjN1ecwvtPKLkdltZyB+H5DjCBcNwto=
Subject key identifier: 12:E3:0E:DC:7F:14:34:73:4E:0E:9E:9E:B6:A1:1D:56:78:E2:03:FB
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 01951DB8C2E2E35452D1A4B8357884903BA7
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/EuMO3H8UNHNODp6etqEdVnjiA_s.roa
Signing time: Wed 19 Feb 2025 10:20:02 +0000
ROA not before: Wed 19 Feb 2025 10:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213522
IP address blocks: 89.150.62.0/24 maxlen: 28
Validation: Failed, certificate revoked on Thu 20 Feb 2025 10:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:b8:c2:e2:e3:54:52:d1:a4:b8:35:78:84:90:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Feb 19 10:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e30edc7f1434734e0e9e9eb6a11d5678e203fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:04:af:31:ed:85:78:ee:c5:20:e4:7d:1b:
1f:5d:bd:92:88:b0:1c:bc:85:8a:77:2c:76:a9:d5:
cd:d3:53:bc:23:eb:e9:fb:c7:b2:16:1c:b2:b7:ab:
97:65:6f:28:b5:95:40:9b:8d:93:6f:88:42:7f:28:
be:11:ab:f0:80:3c:96:62:25:9a:b3:ca:b8:71:be:
f3:2b:0d:45:e1:2b:63:78:3f:59:11:73:82:44:e1:
b8:96:85:e1:0d:a1:e0:cd:4b:0d:75:f1:ea:d4:35:
f5:ce:b8:a8:0e:e4:b5:47:7e:bd:f9:07:da:54:50:
e4:4a:56:0c:14:f2:1d:e3:24:aa:fd:4d:5c:2e:fc:
a1:d5:61:57:0a:f5:56:dc:1a:3e:3a:57:f2:45:a2:
db:e0:70:ab:7e:17:48:83:d1:cd:a3:ec:fe:e9:6a:
22:1c:06:5b:b8:93:30:9a:7a:24:bf:a4:de:c5:2c:
b4:cb:1b:03:17:c4:d8:cc:c2:65:67:8c:8f:d3:c9:
d4:80:17:a2:08:dc:b8:72:f2:a2:61:0c:b7:06:9a:
20:9a:0a:79:f5:4c:ca:d1:ba:18:a3:8b:0f:1e:ea:
b8:33:7e:0b:25:9c:fc:94:ec:58:16:e3:5d:92:ff:
0a:e0:35:54:84:ca:74:f8:fd:58:aa:6d:33:d9:f5:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:0E:DC:7F:14:34:73:4E:0E:9E:9E:B6:A1:1D:56:78:E2:03:FB
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/EuMO3H8UNHNODp6etqEdVnjiA_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.62.0/24
Signature Algorithm: sha256WithRSAEncryption
92:24:12:3f:61:e9:cb:40:59:70:3e:ca:30:8b:96:ad:2a:0c:
3b:c1:ca:04:67:b3:00:de:1d:3b:2a:eb:4c:5c:a5:d1:15:e2:
d7:29:14:18:b4:51:92:66:14:6b:e6:d4:4d:54:28:e3:4a:0c:
d5:22:42:ff:64:18:3d:d0:7a:5e:8b:75:31:bc:ba:df:dd:62:
b4:ef:f2:a8:81:cc:53:a3:20:1f:65:52:ed:23:91:2e:17:a8:
fc:98:14:11:19:dc:19:74:7e:d4:bb:bb:72:63:17:ba:b0:d0:
2c:84:88:b7:7b:82:a1:47:30:62:8d:84:05:74:67:d6:ea:5f:
e6:4f:1f:80:7a:2c:05:2a:c4:5b:17:fd:10:bb:c0:2b:15:d1:
6d:ca:88:9b:1c:be:60:5c:6f:cb:1b:90:e7:38:73:b0:2a:64:
d9:e2:ca:c7:16:3f:af:ad:dc:93:7e:35:37:b4:6d:01:51:1d:
17:58:1c:5c:da:f4:85:d1:0c:e2:0e:9d:0c:a2:d4:f9:1f:37:
2f:dc:80:55:04:14:10:b1:73:73:ff:bc:12:33:38:32:e5:86:
94:04:ee:35:70:5c:ee:2f:89:f6:e8:e1:8b:6e:3d:f6:7a:c8:
fa:7a:48:86:28:77:d2:61:fc:96:8f:06:36:9a:0b:f8:e7:9c:
8b:42:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:57:08 2025 by rpki-client